Jakub

hmm unicorn I can haz?

Woo I got hats!

regexpal.com <-- shows like its working

hmmmm @wisemonkey I think I've done it :P

looking at my documentation it is something like "[^0-9a-zA-Z\s\-_]"

+-, or +_ shrug

just not sure how to add - / _ (how do I define any occurance of - or _ :P

i want to have any input that is A-Z, a-z, 0-9, -, [space], _

yeah...

@wisemonkey its simple I'm sure, I just don't use regex enough :P

I want a regex to santiize some input, I got this one for alphanumerics => "[^0-9a-zA-Z\s]" (alphanumeric + spaces) but I need to allow "- / _" in there as well

Can someone help me with a RegEx (i suck at them, usualy due to lack of usage)

meh.. ;)

Yep, no old people allowed!

How can we identify attack vector?

anyone got any good reads on where to go from here? I've shut the side down, need to replace DB backup (injected into tables <script referalls to a remote site)

hey folks.. my company site just got hit with an XSS attack